2016 CVE Vulnerabilities

10,656 CVEs published in 2016.

CVE IDSeverityCVSSDescription
CVE-2016-11053MEDIUM4.6An issue was discovered on Samsung mobile devices with software through 2015-11-11 (supporting FRP/RL). There is a Facto...
CVE-2016-11052HIGH7.8An issue was discovered on Samsung mobile devices with L(5.0/5.1) software. je_free in libQjpeg.so in Qjpeg in Qt 5.5 al...
CVE-2016-11051——Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2015-0569. Reason: This candidate is a duplicate of C...
CVE-2016-11050MEDIUM4.3An issue was discovered on Samsung mobile devices with S3(KK), Note2(KK), S4(L), Note3(L), and S5(L) software. An attack...
CVE-2016-11049CRITICAL9.1An issue was discovered on Samsung mobile devices with software through 2016-01-16 (Shannon333/308/310 chipsets). The IM...
CVE-2016-11048MEDIUM4.6An issue was discovered on Samsung mobile devices with L(5.0/5.1) (Spreadtrum or Marvell chipsets) software. There is a ...
CVE-2016-11047HIGH7.8An issue was discovered on Samsung mobile devices with JBP(4.2) and KK(4.4) (Marvell chipsets) software. The ACIPC-MSOCK...
CVE-2016-11046HIGH7.5An issue was discovered on Samsung mobile devices with JBP(4.3), KK(4.4), and L(5.0/5.1) software. Because of a misused ...
CVE-2016-11045HIGH7.8An issue was discovered on Samsung mobile devices with L(5.0/5.1) software. The Gallery library allow memory corruption ...
CVE-2016-11044HIGH7.8An issue was discovered on Samsung mobile devices with L(5.0/5.1) and M(6.0) (with Fingerprint support) software. The ch...
CVE-2016-11043HIGH7.5An issue was discovered on Samsung mobile devices with M(6.0) software. The S/MIME implementation in EAS uses DES (where...
CVE-2016-11042HIGH7.5An issue was discovered on Samsung mobile devices with L(5.0/5.1) and M(6.0) software. There is a SIM Lock bypass. The S...
CVE-2016-11041MEDIUM4.6An issue was discovered on Samsung mobile devices with KK(4.4) software. Attackers can bypass the lockscreen by sending ...
CVE-2016-11024CRITICAL9.8odata4j 0.7.0 allows ExecuteJPQLQueryCommand.java SQL injection. NOTE: this product is apparently discontinued.
CVE-2016-11023CRITICAL9.8odata4j 0.7.0 allows ExecuteCountQueryCommand.java SQL injection. NOTE: this product is apparently discontinued.
CVE-2016-11022HIGH7.2NETGEAR Prosafe WC9500 5.1.0.17, WC7600 5.1.0.17, and WC7520 2.5.0.35 devices allow a remote attacker to execute code wi...
CVE-2016-1000111MEDIUM5.3Twisted before 16.3.1 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not pro...
CVE-2016-1487HIGH8.8Lexmark Markvision Enterprise before 2.3.0 misuses the Apache Commons Collections Library, leading to remote code execut...
CVE-2016-6918CRITICAL9.8Lexmark Markvision Enterprise (MVE) before 2.4.1 allows remote attackers to execute arbitrary commands by uploading file...
CVE-2016-1159MEDIUM6.5In ZOHO Password Manager Pro (PMP) 8.3.0 (Build 8303) and 8.4.0 (Build 8400,8401,8402), underprivileged users can obtain...
CVE-2016-11021HIGH7.2setSystemCommand on D-Link DCS-930L devices before 2.12 allows a remote attacker to execute code via an OS command in th...
CVE-2016-11020CRITICAL9.8Kunena before 5.0.4 does not restrict avatar file extensions to gif, jpeg, jpg, and png. This can lead to XSS and remote...
CVE-2016-4606CRITICAL9.8Curl before 7.49.1 in Apple OS X before macOS Sierra prior to 10.12 allows remote or local attackers to execute arbitrar...
CVE-2016-3182MEDIUM5.5The color_esycc_to_rgb function in bin/common/color.c in OpenJPEG before 2.1.1 allows attackers to cause a denial of ser...
CVE-2016-3181——Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-3182. Reason: This candidate is a duplicate of C...

Check if your code is affected by 2016 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now